The vulnerability of the Telnet service in the microprogramming software of Tenda AX12 wireless routers allows a hacker to enhance their privileges and gain full control over the device.

The vulnerability of the Telnet service provided by the microprogramming software of the Tenda AX12 wireless routers lies in the use of strictly encrypted authentication data. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain full control over the device...

EUVD-2022-33003

Malicious code in bioql PyPI...

CVE-2022-28561

There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...

The vulnerability of the sub_431CF0() function in the microprogrammed Wi-Fi router software Tenda AX12 allows a hacker to execute arbitrary code.

The vulnerability of the sub431CF0 function in Tenda AX12 Wi-Fi routers’ microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Tenda AX12 Buffer Overflow Vulnerability (CNVD-2025-07608)

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. The Tenda AX12 suffers from a buffer overflow vulnerability that originates from the sub43fdcc function in /goform/SetNetControlList that fails to correctly validate the length of the input data, which can be exploited by ...

PT-2024-28754 · Unknown · Ax3000 Dual-Band Gigabit Wi-Fi 6 Router Ax9 +1

Name of the Vulnerable Software and Affected Versions: AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 version V22.03.01.46 AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 version V1.0 V22.03.01.46 Description: The issue is related to an authenticated remote command execution via the macFilterType...

Tenda AX12 list parameter command execution vulnerability

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. A command execution vulnerability exists in Tenda AX12 version V22.03.01.46, which is caused due to the failure of the "list" parameter of /goform/SetNetControlList to correctly filter constructed command special character...

Stack overflow

There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...